This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File:                     DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier:          ODWAWpS+eM5KNVIvvOYQMHXdaARN5ilDhoe0yP/HI/E=
Subject key identifier:   CD:75:F5:B2:00:8A:F4:EF:D7:9F:05:7F:90:5F:3A:3E:FE:A5:C0:EA
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer:       /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial:       019C424682E8C35211773F6239B7C6E83FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number:          0541
Signing time:             Mon 09 Feb 2026 12:00:43 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:43 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:43 +0000
Files and hashes:         1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: zb2omxiYG2LqtVqNT++GdgHyDSpUPySVdFmyREdAn58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:82:e8:c3:52:11:77:3f:62:39:b7:c6:e8:3f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
        Validity
            Not Before: Feb  9 12:00:43 2026 GMT
            Not After : Feb 10 12:00:43 2026 GMT
        Subject: CN=cd75f5b2008af4efd79f057f905f3a3efea5c0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f9:73:59:12:2a:11:ac:52:10:fd:db:f0:4b:
                    22:aa:bb:ce:89:b1:0b:04:11:c0:d3:52:89:fb:cf:
                    3e:63:e2:a5:63:a9:41:8a:38:16:68:e2:9f:54:d8:
                    41:a2:c6:25:54:c2:0c:59:65:ca:c9:83:98:19:7f:
                    de:99:45:79:06:e6:51:bb:80:84:b6:ef:51:f1:5b:
                    c5:d7:d8:11:b4:70:77:7c:77:50:52:fb:eb:94:d6:
                    11:60:45:04:51:29:5b:10:25:7e:fa:e3:88:1a:f5:
                    67:98:34:87:85:4e:c0:a5:b4:c1:fd:09:bb:97:39:
                    7b:f3:54:11:eb:21:d2:95:63:0a:e7:a9:22:35:f8:
                    38:ab:c3:47:97:69:20:2a:f9:b3:d2:ff:ab:c7:78:
                    e5:f8:d4:19:e9:a0:02:6e:8b:f2:71:92:a4:2f:81:
                    7f:9a:ac:d1:3d:b2:e7:74:ec:fb:31:8f:24:8d:fe:
                    fe:7b:f9:45:97:58:d0:70:dc:ff:bf:9a:5b:d4:2c:
                    e4:74:7e:61:17:0d:24:f2:82:5b:1d:71:f3:88:92:
                    fd:1f:b7:f6:f5:c9:93:75:6d:3c:78:10:7c:9d:cc:
                    77:91:ad:bc:93:61:c0:f4:6c:ec:7f:ed:4f:dc:1b:
                    ad:62:71:47:d1:42:ae:a0:54:7c:05:42:07:00:47:
                    b4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:75:F5:B2:00:8A:F4:EF:D7:9F:05:7F:90:5F:3A:3E:FE:A5:C0:EA
            X509v3 Authority Key Identifier:
                keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:24:52:e2:4f:af:c8:95:58:95:5d:ca:ff:6d:b5:28:36:a8:
         fc:3d:73:da:f3:89:c6:a5:b4:cb:f9:b8:a9:03:11:96:13:cd:
         e8:62:5c:13:d2:b1:0e:e3:73:23:2b:15:b7:75:b8:3f:f0:c2:
         3b:00:50:be:e4:9b:7e:ba:4a:6c:77:4c:37:63:f5:46:bd:43:
         77:30:57:1e:89:17:2e:ce:47:cb:50:e6:4b:be:a1:62:99:c5:
         0e:3c:eb:6c:d7:c2:fa:41:94:3c:c3:ce:2e:53:00:8b:c1:36:
         72:d4:b4:c1:64:cb:d6:07:1a:4c:bf:f8:f0:d7:b4:79:c2:08:
         1e:00:a4:7e:ab:4b:eb:82:89:7c:05:f7:31:6d:71:e2:37:a7:
         7a:0c:d4:67:45:71:fa:19:7b:cc:d6:e0:8e:ef:64:e4:64:46:
         a8:68:6a:9f:70:da:35:e8:46:ce:7c:b2:05:a9:3e:f5:8c:e5:
         51:e0:ef:41:e2:11:f0:8d:b2:5d:89:95:79:80:ac:87:79:50:
         ce:ad:ff:38:a7:c2:c9:8f:0e:d9:11:cc:4a:21:a3:25:28:eb:
         4e:2e:97:7e:92:50:c9:ee:4e:8a:50:3f:8d:b3:57:23:ad:12:
         57:d4:5f:d8:da:b2:d9:20:c9:9d:9e:39:af:1f:91:d2:dc:ea:
         4c:6b:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:35 2026 by rpki-client